BaseFortify

Publication date: 2025-11-26

Last updated on: 2025-12-03

Assigner: GitLab Inc.

Description

BPv7 dissector crash in Wireshark 4.6.0 allows denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-26

Last Modified

2025-12-03

Generated

2026-07-06

AI Q&A

2025-11-26

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13674

EUVD

EUVD-2025-199716

Affected Vendors & Products

Vendor	Product	Version / Range
wireshark	wireshark	4.6.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-824	The product accesses or uses a pointer that has not been initialized.

Attack-Flow Graph

Executive Summary

This vulnerability is a crash in the BPv7 dissector component of Wireshark version 4.6.0, which can be triggered to cause a denial of service.

Impact Analysis

The vulnerability can cause Wireshark 4.6.0 to crash, resulting in a denial of service condition where the application becomes unavailable or stops functioning properly.

Hi! I’m here to help you understand CVE-2025-13674. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70